Senior Cloud Engineer

The Senior Cloud Engineer is a hands-on infrastructure engineer responsible for building, operating, and securing the organisation's cloud platform. Reporting to the Infrastructure Lead, this role delivers infrastructure as code, maintains production reliability, and supports DR testing and ISO 27001:2022 evidence requirements.

Key Responsibilities

Infrastructure Provisioning and Operations

• Build and configure cloud infrastructure using IaC tooling; follow IaC change controls across all environments.
• Manage networking (VPCs, security groups, firewall rules, DNS), secrets, and TLS certificate lifecycle.
• Operate and maintain Kubernetes clusters and CI/CD pipeline infrastructure; execute patch management within defined SLAs.
• Maintain production stability through monitoring, alerting, and capacity management; contribute to cost-efficiency initiatives.

DevSecOps and Compliance

• Implement GitOps workflows and platform engineering standards; apply security hardening across cloud environments.
• Document infrastructure controls and produce evidence to support the ISO 27001:2022 certification programme.
• Support third-party infrastructure service provider engagements at the technical level.

Business Continuity and Support

• Execute DR tests and maintain DR runbooks; produce DR test records as ISO 27001:2022 audit evidence.
• Respond to production incidents, perform root-cause analysis, and implement preventive improvements.
• On-call availability is required to support 24x7 incident response coverage.

Requirements

Experience

• 8+ years of hands-on infrastructure or platform engineering experience with production systems.
• Proven experience operating 24x7 production infrastructure including on-call incident response and DR execution.
• Experience with IaC-driven provisioning and Kubernetes in production; ISO 27001:2022 exposure advantageous.
• Background in regulated industries preferred; on-premise or hybrid infrastructure experience advantageous.
• Familiarity with MAS Technology Risk Management (TRM) Guidelines is a bonus.

Technical Skills

• Cloud infrastructure: provisioning, configuration, and security hardening (AWS, Azure, or GCP)
• Infrastructure as Code (IaC): Terraform, or equivalent
• Networking: LAN/WAN, VPCs, security groups, firewall rules, DNS, and TLS certificate management
• Container orchestration: Kubernetes cluster operations and CI/CD pipeline infrastructure
• DevSecOps practices: GitOps workflows and configuration management at scale
• Database infrastructure: deployment, high availability, and backup/recovery of distributed SQL databases (e.g. CockroachDB, PostgreSQL, or equivalent)
• Observability: monitoring, alerting, and incident management for 24x7 environments
• Secrets management and patch management

Qualifications

• Bachelor's degree or higher in Computer Science, IT, Engineering, or a related discipline.
• Cloud platform certifications (AWS, Azure, or GCP) preferred; ITIL advantageous.